蓝奏网盘带密码文件分享下载链接分析思路

先准备准备一个 lanzou链接

链接(自己准备一个该链接只作为演示)： https://wwd.lanzouw.com/i3Ya2065bn0b
密码:6ye7

打开浏览器抓包(开发者工具或者 F12切换出来 ,浏览器都一个样子自己随便选)

切换到network ，抓包数据

然后输入密码

通过分析得到重要的页面只有两个【下载页面和提交密码得到下载地址的接口】

下载页面代码

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=0" />
<title>文件</title>
<meta name="description" content="文件大小：4.0 B|巴克压力。" />
<script type="text/javascript" src="/includes/js/jquery.js"></script>
<script type="text/javascript" src="/img/qrcode.min.js"></script>
<link rel="shortcut icon" href="/favicon.ico">
</head>
<body>
<style>
::-webkit-scrollbar{background:rgba(0,0,0,0.01);height: 6px;width:6px}::-webkit-scrollbar-thumb{background-color:rgba(0,0,0,0.1)}::-webkit-scrollbar-thumb:hover {background:rgba(0,0,0,0.5);}
::-webkit-scrollbar-track{background: #f0f0f0;border-radius: 10px;}
::-webkit-scrollbar-thumb{border-radius: 10px;background-color: #c5c5c5;}
body{font: 14px Arial,\5FAE\8F6F\96C5\9ED1,sans-serif;margin: auto;color: #333;}
a{text-decoration: none;color: #111;}
a:hover{color: #FF3311;}
.n_hd{  height: 30px;padding: 10px;border-bottom: 1px solid #eee;position: fixed;background: rgba(255, 255, 255, .9);z-index: 8;right: 0;left: 0;}
.n_hd a{-webkit-transition: 0.1s;float: right;border-radius: 3px;}
.n_hd a:hover{opacity: .7;}
.user-ico{float: left;min-width: 300px;text-align: left;line-height: 30px;}
.user-name{color:#ff6740;margin-left: 10px;}
.user-name-txt{margin-left: 10px;}
.user-ico-img{width: 30px;height: 30px;border-radius: 50%;position: absolute;}
.user-ico-div{background: #bbb;width: 30px;height: 25px;border-radius: 50%;padding-top: 5px;float: left;}
.user-ico-div-1{background: #777;width: 10px;height: 10px;border-radius: 50%;margin: auto;}
.user-ico-div-2{background: #777;width: 20px;height: 10px;border-radius: 50%;margin: auto;margin-top: 1px;}
.n_login{background: #ffd1c5;padding: 0px 12px;font-size: 12px;    line-height: 30px;}
.n_login font{color: #fff;}
.n_box{width: 593px;margin-right: auto;margin-left: auto;height: auto;padding-top: 150px;}
.n_box_ico{border-radius: 10px;width: 100px;height: 100px;margin: auto;}
.n_box_ico img{border-radius: 20px;    width: 100%;}
.n_file_info{text-align: center;color: #888;    padding-bottom: 30px;}
.n_file_infos{margin-left: 10px;}
.n_box_fn{font-size: 26px;text-align: center;padding: 26px 0px 5px 0px;}
.n_box_2fn{font-size: 26px;text-align: center;padding: 26px 0px 5px 0px;}
.n_box_des{padding: 30px 0;margin: auto;line-height: 30px;min-height: 100px;font-size: 16px;}
.n_box_3fn{font-size: 26px;text-align: center;padding: 26px 0px 5px 0px;}
.n_file{background: #e1e7ea;font-size: 12px;width: 200px;border-radius: 50px;height: 40px;line-height: 40px;margin: auto;padding: 0 20px;}
.n_filesize{position: absolute;}
.n_downlink{position: absolute;height: 34px;width: 300px;margin-top: 4px;z-index: 9;}
.n_bot{background: #f7f7f7;text-align: center;padding: 50px;}
#code{margin: auto;width: 190px;margin-top: 30px;}
.n_foot{font-size: 12px;color: #999;padding: 20px;text-align: center;background: #f7f7f7;}
.n_copy{}
#downajax{text-align: center;float: right;padding: 5px 0;}
#downajax a{background: #0af;box-shadow: 0 1px 1px rgba(0,0,0,.15);color: #fff;text-decoration: none;display: block;width: 50px;text-align: center;border-radius: 50px;font-size: 14px;height: 30px;line-height: 30px;}
#downajax a:hover{background: #0377ff;}
#downajax a:active{box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.25);}
#passwddiv{position: fixed;background: #fff;background: rgba(255, 255, 255, .96);width: 100%;height: 100%;top: 0;bottom: 0;z-index: 99;}
.passwddiv-center{width: 300px;height: 300px;position: absolute;bottom: 50%;margin-bottom: -100px;left: 50%;margin-left: -150px;}
.passwddiv-userico{margin: auto;width: 90px;}
.passwddiv-userico-img{width: 90px;height: 90px;border-radius: 50%;position: absolute;}
.passwddiv-userico-0{background: #e9edef;width: 90px;height: 75px;border-radius: 50%;padding-top: 15px;}
.passwddiv-userico-1{background: #fff;width: 30px;height: 30px;border-radius: 50%;margin: auto;}
.passwddiv-userico-2{background: #fff;width: 59px;height: 26px;border-radius: 50%;margin: auto;margin-top: 3px;}
.passwddiv-user{text-align: center;margin-top: 20px;}
.passwddiv-user span{color: #000000;padding: 0 5px;}
.passwddiv-input{width: 200px;margin: auto;padding:10px;border-radius:5px;margin-top: 20px;background: #e9edef;}
.passwddiv-input:hover{background: #e1e7ea;}
.passwdinput{font-size: 14px;border: 0;background: #e9edef;background: #ffffff\9;line-height: 30px;height: 30px;outline: 0;padding: 0;text-indent: 5px;width: 160px;}
.passwdinput:focus{background: #e1e7ea;}
.passwddiv-btn{width: 30px;height: 30px;background: #0af;box-shadow: 0 1px 1px rgba(0,0,0,.15);border-radius: 50%;float: right;cursor: pointer;}
.passwddiv-btn:hover{background: #0377ff;}
.passwddiv-btn:active{box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.25);}
.passwddiv-btn-1{border-bottom: 1px solid #fff;width: 15px;margin-top: 14px;margin-left: 6px;}
.passwddiv-btn-2{border-bottom: 1px solid #fff;border-right: 1px solid #fff;width: 10px;height: 10px;transform: rotate(-45deg);margin-top: -6px;margin-left: 8px;}
#info{text-align:center;padding-top: 10px;}
.n_box_des{display:none}
.filter{filter: blur(5px);}
</style>
<div id="file" class="filter">
<div class="n_hd"><div class="user-ico"><div class="user-ico-div"><div class="user-ico-div-1"></div><div class="user-ico-div-2"></div></div> <span class="user-name">13**</span><span class="user-name-txt">的分享文件</span></div><a href="/q/jb/?f=72519841&report=1" class="n_login"><font id="rpt"> </font></a></div>
<div class="n_box">
<div style="color: #8a6d3b;background-color: #fcf8e3;padding: 5px;border-radius: 3px;text-align: center;font-size: 12px;position: absolute;width: 400px;margin-top: -70px;margin-left: 90px;">谨防刷单兼职，网贷，金融，裸聊敲诈，赌博等诈骗，请立即举报</div><div class="n_box_ico"><span class="filename"><img src="/images/type/txt_max.gif"></span></div>
<!--<div class="n_box_2fn"></div> -->
<div class="n_box_3fn" id="filenajax">文件</div>
<!--<div class="n_file_info"></div> -->
<div class="n_file_info"><span class="n_file_infos">昨天18:50</span> <span class="n_file_infos">Win桌面</span></div>
<div class="n_file"><div class="n_filesize">大小：4.0 B</div><div id="downajax"></div></div>
<div class="n_box_des">巴克压力。</div>
</div>
<div class="n_bot">
<div>手机下载请扫二维码</div>
<div id="code"></div>
</div>
<div class="n_foot"><div class="n_copy">版权声明：不得利用云存储发布，存储，淫秽，诈骗等违法信息。<br>或者投诉邮箱：ta@lanzou.com</div>&copy; 2022 Lanzou</div></div>
<div id="passwddiv">
<div class="passwddiv-center">
<div class="passwddiv-userico"><div class="passwddiv-userico-0"><div class="passwddiv-userico-1"></div><div class="passwddiv-userico-2"></div></div></div>
<div class="passwddiv-user">获取<span>13**</span>的文件</div>
<div class="passwddiv-input"><input type="text" name="pwd" class="passwdinput" id="pwd" value="" placeholder="输入密码" />
<div class="passwddiv-btn" onclick="down_p();"><div class="passwddiv-btn-1"></div><div class="passwddiv-btn-2"></div></div></div>
<div id="info"></div>
</div>
</div>
<script type="text/javascript">
//回车事件
$(document).keyup(function (e) {if (e.keyCode == 13) {down_p();}
});
function down_p(){var pwd =document.getElementById('pwd').value;if (pwd == '' || pwd == undefined || pwd == null) {$(".passwdinput").focus();return false;}$.ajax({type : 'post',url : '/ajaxm.php',data : 'action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p='+pwd,dataType : 'json',success:function(msg){var date = msg;if(date.zt == '1'){$("#downajax").html("<a href="+date.dom+"/file/"+ date.url +" target=_blank rel=noreferrer>下载</a>");$("#passwddiv").hide();$("#filenajax").text(date.inf);document.title = date.inf;$(".n_box_des").show();$("#file").removeClass("filter");}else{$("#info").text(date.inf);};},error:function(){$("#info").html("失败，请刷新");}});
}
document.getElementById('rpt').innerHTML='举报';
var urls =window.location.href + '?cp=qc9w8ud.0.0';
var qrcode = new QRCode('code', {text: urls,width: 190,height: 190,colorDark : '#3f3f3f',colorLight : '#ffffff',correctLevel : QRCode.CorrectLevel.H});
</script>
<div style="display:none"><script src="https://s6.cnzz.com/z_stat.php?id=5289133&web_id=5289133" language="JavaScript"></script><script src="https://statics.woozooo.com/img/bd.js"></script><script src="https://statics.woozooo.com/img/hm.js"></script></div>
</body>
</html>

ajaxm.php响应代码

{"zt":1,"dom":"https:\/\/developers.lanzoug.com","url":"?AGYBPww9UGEIAQU9BTAGagM8V28CbFBjBzFWfgYuUSgHcwV0XmUBPAM5U2AGDVA4BzkGPlM7V2dRYwYxUDUBOAA0AWcMd1BiCC0FbgVlBiEDKVciAmBQYAcwVmIGaFF\/BzcFZF4sAWUDbFMqBmBQMgdqBjNTaFdtUTMGOVBqAWMAYgEyDDNQPQhpBTIFNAZlA2pXZAI\/UDQHMFZkBmlRaAcwBWReOwExAzRTNQZ8UCUHJQZ3UypXIFElBmVQfgFpAGQBawxpUDcIbAVqBWIGNwN\/VyYCNFA\/B2VWNgZnUWEHMQVnXjcBbANmUzcGZlBlB2oGLVMiV3NRMAZsUHsBPQAwAXAMJFB0CCkFbgVgBjEDbFdmAmpQZQcxVmgGalFgByEFJ15qASUDaFM0BmNQYgdzBjZTO1d7UWAGNlAiATIAMgFi","inf":"111.txt"}

ajaxm.php请求协议头

:authority: wwd.lanzouw.com
:method: POST
:path: /ajaxm.php
:scheme: https
accept: application/json, text/javascript, */*
accept-encoding: gzip, deflate, br
accept-language: zh-CN,zh;q=0.9
content-length: 114
content-type: application/x-www-form-urlencoded
cookie:
origin: https://wwd.lanzouw.com
referer: https://wwd.lanzouw.com/i3Ya2065bn0b
sec-fetch-mode: cors
sec-fetch-site: same-origin
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Core/1.77.119.400 QQBrowser/10.9.4817.400
x-requested-with: XMLHttpRequest

提交信息

action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p=6ye7

格式化提交信息方便查看

action: downprocess
sign: VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c
p: 6ye7

先分析下载页面的主要代码

function down_p(){var pwd =document.getElementById('pwd').value;if (pwd == '' || pwd == undefined || pwd == null) {$(".passwdinput").focus();return false;}$.ajax({type : 'post',url : '/ajaxm.php',data : 'action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p='+pwd,dataType : 'json',success:function(msg){var date = msg;if(date.zt == '1'){$("#downajax").html("<a href="+date.dom+"/file/"+ date.url +" target=_blank rel=noreferrer>下载</a>");$("#passwddiv").hide();$("#filenajax").text(date.inf);document.title = date.inf;$(".n_box_des").show();$("#file").removeClass("filter");}else{$("#info").text(date.inf);};},error:function(){$("#info").html("失败，请刷新");}});
}

提交信息给 ajaxm接口然后拿到下载地址

重要代码

$.ajax({type : 'post',url : '/ajaxm.php',data : 'action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p='+pwd,dataType : 'json',success:function(msg){var date = msg;if(date.zt == '1'){$("#downajax").html("<a href="+date.dom+"/file/"+ date.url +" target=_blank rel=noreferrer>下载</a>");

可以看到提交代码，向接口ajaxm提交数据，提交数据=data+pwd,pwd是手动输入的密码。

'action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p='+pwd,

所以我们手动拼接还原提交数据

action=downprocess&sign=VzFSbAs6Dj9VXAc4CztXa1A9BjFRO1NgCjQAPlI6UWFSdAYlAWFXMgVlAWILawU9A2oPOFI9ATcANA_c_c&p=6ye7

抓包数据和拼接的提交数据是一致的，最后就是提交数据然后获取响应信息

先判断 zt值是否为1，为1则拼接下载地址

if(date.zt == '1'){

然后拼接信息得到下载地址

date.dom+"/file/"+ date.url

下载地址

https://developers.lanzoug.com/file/?AGYBPww9UGEIAQU9BTAGagM8V28CbFBjBzFWfgYuUSgHcwV0XmUBPAM5U2AGDVA4BzkGPlM7V2dRYwYxUDUBOAA0AWcMd1BiCC0FbgVlBiEDKVciAmBQYAcwVmIGaFF/BzcFZF4sAWUDbFMqBmBQMgdqBjNTaFdtUTMGOVBqAWMAYgEyDDNQPQhpBTIFNAZlA2pXZAI/UDQHMFZkBmlRaAcwBWReOwExAzRTNQZ8UCUHJQZ3UypXIFElBmVQfgFpAGQBawxpUDcIbAVqBWIGNwN/VyYCNFA/B2VWNgZnUWEHMQVnXjcBbANmUzcGZlBlB2oGLVMiV3NRMAZsUHsBPQAwAXAMJFB0CCkFbgVgBjEDbFdmAmpQZQcxVmgGalFgByEFJ15qASUDaFM0BmNQYgdzBjZTO1d7UWAGNlAiATIAMgFi

最后需要注意的是，访问协议头中带有一个 Referer

Referer: https://wwd.lanzouw.com/i3Ya2065bn0b

自此整个流程分析完了,相比较下，有密码的下载链接获取方式比无密码的更加简单。

蓝奏网盘带密码文件分享下载链接分析思路相关推荐

php 蓝奏网盘上传文件,蓝奏云盘客户端v2.6 支持文件夹和大文件上传了
首先来份哈勃检测:https://habo.qq.com/file/showdetail?pk=ADcGZ11vB28IOVs6U2U%3D 软件MD5:5bb1f50860b2e626ccda17e ...
php 蓝奏网盘上传文件,教给大家一个蓝奏云高级玩法，如何把文件一键秒上传到蓝奏云网盘...
01 蓝奏云是我最常用的网盘平台当然这也是在度盘限速之后毕竟,蓝奏也有几个很大的短板但整体上是利大于弊! 好处就是,整个网盘空间没有上限不论你上传多少个文件.他都不拦你另外一点,下载永远都是 ...
php 蓝奏网盘上传文件,蓝奏云_文件上传_API
~~~[api] post:https://api-lanzou.anyhulian.ml/v2/upload.php *content-type=multipart/form-data; bound ...
php获取蓝凑云文件列表,【PHP】利用蓝奏网盘做个人小文件网盘和获取真实下载地址...
本帖最后由 kuhoo 于 2019-12-17 00:08 编辑之前已经有人分享过蓝奏云盘直链获取教程和源码,但是或已经失效,或只能用于电脑. 按照之前网友分享的思路,对蓝奏网盘的手机端页面进行分 ...
php文件直链源码,蓝奏网盘文件夹直链解析源码
蓝奏网盘文件夹直链解析源码 @晶晶易.版本 2 .支持库 spec .程序集程序集1 .子程序 _启动子程序, 整数型, , 本子程序在程序启动后最先执行 .局部变量返回文本, 文本型 .局部变量 ...
蓝奏云文件上传php源码_蓝奏云客户端 v0.3.1，第三方蓝奏网盘电脑版
圆桌效率,让生活更有序,让工作更高效! 1.软件介绍蓝奏云客户端,采用蓝奏云API项目使用PyQt5实现图形界面,蓝奏云盘API项目实现了对蓝奏网盘的基本操作: 登录.列出文件.下载文件.上传文件. ...
蓝奏云客户端 v0.2.5，第三方蓝奏网盘电脑版
蓝奏云客户端,采用蓝奏云API项目使用PyQt5实现图形界面,完成蓝奏云的大部分功能. 蓝奏云API项目封装了对蓝奏云的基本操作: 登录.列出文件.下载文件.上传文件.删除文件(夹). 清空回收站.恢 ...
zip转直链php,蓝奏网盘直链转换器
蓝奏网盘直链转换器是一款非常不错的网盘直链转换工具,能够帮助用户批量进行蓝奏云网盘链接转换,可以自定义设置转换线程数,让用户能够直接下载分享的文件,下载速度非常快,有需要的用户不要错过了,赶快来下载吧 ...
获取蓝奏网盘无密码下载链接分析思路
获取蓝奏网盘无密码下载链接分析思路先准备准备一个 lanzou链接链接(自己准备一个该链接只作为演示):https://wwd.lanzouw.com/i269V065bmza 打开浏览器抓包(开 ...

蓝奏网盘带密码文件分享下载链接分析思路

蓝奏网盘带密码文件分享下载链接分析思路

蓝奏网盘带密码文件分享下载链接分析思路相关推荐

最新文章

热门文章